$ rpki-client -vvvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft File: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft (raw, json) Hash identifier: 4KDGKwAZPeo4fM2QPHfSxiDfion028z3QwTAbT4P/PA= Subject key identifier: 47:D9:C5:C4:86:68:02:73:6D:43:B9:BA:3F:60:55:5F:CE:6A:E5:DC Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD Certificate issuer: /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft Manifest number: EE Signing time: Thu 29 Oct 2026 07:11:16 +0000 Manifest this update: Thu 29 Oct 2026 07:11:16 +0000 Manifest next update: Thu 05 Nov 2026 07:11:16 +0000 Files and hashes: 1: 3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl (hash: HBu/OsMBWcISxxpIqbdTOSfVI4Cszd17/rYT0rne7eM=) 2: 18DC6A2602A311F188F4114D3A3D8C67.roa (hash: t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 07:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD Validity Not Before: Oct 29 07:11:16 2026 GMT Not After : Nov 5 07:11:16 2026 GMT Subject: CN=6ae2f194-9591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:86:8c:28:76:b4:38:f1:57:1f:82:de:98: bd:60:cd:66:a5:13:3c:a7:ec:47:b8:f0:67:4a:ac: 9c:6d:61:bb:88:3d:81:8d:55:15:5f:9b:1c:b3:ae: 6c:4d:e6:c4:cd:be:60:41:2d:09:4d:33:69:1c:52: a3:3c:6d:93:f8:7a:9b:5f:7a:50:ff:ac:32:91:be: 28:1e:51:60:1c:a6:2c:ff:6c:00:36:0d:58:a6:d5: 84:f9:8b:6e:97:f0:0b:3d:61:c7:1e:13:28:e7:f1: 13:78:e9:10:19:11:ac:81:0f:fb:2d:5d:10:7e:ba: e2:4a:36:fc:2a:1f:ab:fb:9d:dc:5e:9c:fe:40:19: f9:2f:b7:6c:5b:74:94:1f:8e:1a:67:ab:e5:00:f7: cd:75:8d:d8:2c:b2:c4:6c:fc:bb:ed:24:ab:83:79: 56:dd:ab:7a:7e:ce:e8:8c:d2:37:25:7d:b9:8a:71: e6:fd:ad:a4:00:63:1a:4c:81:79:e5:8e:be:94:b8: d6:70:e4:03:02:28:1e:93:96:f5:97:97:42:45:90: 89:73:79:00:ef:a7:f9:2b:3e:3d:5d:2e:91:69:c2: f6:8f:d4:4a:58:82:cd:94:0f:b0:f2:7c:05:e2:23: 3b:72:c6:47:7a:32:21:e1:dc:1b:57:f9:c6:7f:0d: 61:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:C5:C4:86:68:02:73:6D:43:B9:BA:3F:60:55:5F:CE:6A:E5:DC X509v3 Authority Key Identifier: keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:08:86:8e:60:df:39:73:2d:07:64:58:72:8a:4d:3a:74:50: 07:20:8a:67:40:3f:fc:ba:ec:36:ab:05:14:6c:b4:41:24:3c: 98:61:88:30:2b:b2:1c:da:0d:d8:bd:50:11:79:fa:05:6b:60: a7:b9:f3:53:c2:20:d1:6f:8d:54:ae:83:64:c9:c3:77:1a:2e: ae:39:83:a0:b1:d9:d9:76:ab:c3:9f:6f:6b:1c:39:3e:65:db: 75:21:2b:38:81:22:93:ca:05:ca:5c:ee:05:4c:e1:dd:13:c8: b8:fe:f9:c4:f8:ce:06:a0:45:e3:01:3c:cb:e8:73:30:c6:56: 42:cb:22:6f:fb:f3:37:fa:24:e6:44:7e:75:b8:66:00:4e:43: 17:a5:b5:88:44:8d:24:44:1d:80:03:b7:ff:9e:e2:e0:95:a7: 47:33:d2:9c:b0:f3:a3:3d:7b:23:44:6b:3b:6e:b8:36:ee:af: e9:28:88:9d:6f:a4:88:fb:f5:70:ab:ff:d1:5f:f9:ee:59:97: 37:c4:32:3e:b3:af:dd:31:01:70:54:9e:34:66:97:31:95:88: 35:04:1f:0e:3c:10:f9:75:06:06:ae:5d:ff:e0:d8:e0:46:a0: fa:36:28:c5:27:a1:a6:c5:de:7a:24:05:45:12:62:cc:c5:7e: 0a:73:27:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdDQTgxMTAvBgNVBAUTKEREMjgwODI4RkYwOTk2QThDQkVGMjlCRjBEOTE0REYy NTJERjFDQkQwHhcNMjYxMDI5MDcxMTE2WhcNMjYxMTA1MDcxMTE2WjAYMRYwFAYD VQQDEw02YWUyZjE5NC05NTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkuGjCh2tDjxVx+C3pi9YM1mpRM8p+xHuPBnSqycbWG7iD2BjVUVX5scs65s TebEzb5gQS0JTTNpHFKjPG2T+HqbX3pQ/6wykb4oHlFgHKYs/2wANg1YptWE+Ytu l/ALPWHHHhMo5/ETeOkQGRGsgQ/7LV0QfrriSjb8Kh+r+53cXpz+QBn5L7dsW3SU H44aZ6vlAPfNdY3YLLLEbPy77SSrg3lW3at6fs7ojNI3JX25inHm/a2kAGMaTIF5 5Y6+lLjWcOQDAigek5b1l5dCRZCJc3kA76f5Kz49XS6RacL2j9RKWILNlA+w8nwF 4iM7csZHejIh4dwbV/nGfw1howIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfZxcSG aAJzbUO5uj9gVV/OauXcMB8GA1UdIwQYMBaAFN0oCCj/CZaoy+8pvw2RTfJS3xy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0NBOC82QTlFOTE1QzZF RTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxxakw3eW1fRFpGTjhsTGZI TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8zU2dJS1A4Smxx akw3eW1fRFpGTjhsTGZITDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEgiGjmDfOXMtB2RYcopNOnRQByCKZ0A//LrsNqsFFGy0QSQ8mGGIMCuyHNoN 2L1QEXn6BWtgp7nzU8Ig0W+NVK6DZMnDdxourjmDoLHZ2Xarw59vaxw5PmXbdSEr OIEik8oFylzuBUzh3RPIuP75xPjOBqBF4wE8y+hzMMZWQssib/vzN/ok5kR+dbhm AE5DF6W1iESNJEQdgAO3/57i4JWnRzPSnLDzoz17I0RrO264Nu6v6SiInW+kiPv1 cKv/0V/57lmXN8QyPrOv3TEBcFSeNGaXMZWINQQfDjwQ+XUGBq5d/+DY4Eag+jYo xSehpsXeeiQFRRJizMV+CnMnUA== -----END CERTIFICATE-----Generated at Fri Oct 30 06:12:41 2026 by rpki-client